Senior Application Security Engineer
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. But we need to map content to appropriate headings.
We have sections: About Abridge (company description) – could be "About the role"? Actually "About Abridge" is company overview, not role. The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should create headings that match content: maybe "About Abridge" is not in list but we could treat as "About the role"? However they said use those examples; we can still use other headings? Probably we should stick to those headings where applicable. The posting includes: "About Abridge" (company overview). Could map to "About the role"? Not exactly. But we could still include a heading "About Abridge" as . The instruction says use for section headings (e.g. About the role, Responsibilities...). It doesn't forbid other headings, but suggests those as examples. Safer to use those exact headings where we have content.
We have content for: Responsibilities (What You’ll Do). Requirements/Qualifications/Skills (What You’ll Bring). Benefits (Why Work at Abridge? includes benefits). Pay (Compensation Range). Schedule? Not present. So we omit Schedule.
We also have "About Abridge" maybe we could include as a brief intro paragraph without heading? The instruction: do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
. The instruction says use for section headings (e.g. About the role, Responsibilities...). It doesn't forbid other headings, but suggests those as examples. Safer to use those exact headings where we have content.
We have content for: Responsibilities (What You’ll Do). Requirements/Qualifications/Skills (What You’ll Bring). Benefits (Why Work at Abridge? includes benefits). Pay (Compensation Range). Schedule? Not present. So we omit Schedule.
We also have "About Abridge" maybe we could include as a brief intro paragraph without heading? The instruction: do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. It doesn't forbid a heading for company description. Could use
About Abridge
. That seems reasonable. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: EEO, fraud warning, etc. Also remove "How we take care of Abridgers:" list? That's benefits; we need to keep benefits. The list includes many items; we should keep them as- . Also "Compensation and Equity: Competitive compensation and equity grants for full time employees. ... and much more!" plus compensation range given later. We'll include compensation range in Pay section.
We need to exclude duplicated lines, navigation, legal, EEO, scam-warning. Also remove "Equal Opportunity Employer" paragraph and fraud warning.
We must output only HTML fragment, no /, no markdown fences.
Let's craft:
About Abridge
... description ...
Responsibilities
- ... each bullet from What You’ll Do ...
- . Ensure we keep all detail. Similarly for What You’ll Bring: Experience, Programming Fluency, Cloud & Containers, Technical Depth, AI Security, Bonus Points If… with subpoints: Security Research, Cross-Functional Influence, Data-Driven Security. We'll list each as
- .
Benefits: from "Why Work at Abridge?" includes mission description, culture, then "How we take care of Abridgers:" list. We'll capture benefits as list items under Benefits heading. Also include mission description maybe as
before list. Pay: compensation range: $214.2K - $252K. Also mention "Competitive compensation and equity grants". We'll include both. We must not include placeholder text like "commensurate with experience". Not present. Let's extract exact text. About Abridge paragraph: "About Abridge Abridge was founded in 2018 with the mission of powering deeper understanding in healthcare. Our AI-powered platform was purpose-built for medical conversations, improving clinical documentation efficiencies while enabling clinicians to focus on what matters most—their patients. Our enterprise-grade technology transforms patient-clinician conversations into structured clinical notes in real-time, with deep EMR integrations. Powered by Linked Evidence and our purpose-built, auditable AI, we are the only company that maps AI-generated summaries to ground truth, helping providers quickly trust and verify the output. As pioneers in generative AI for healthcare, we are setting the industry standards for the responsible deployment of AI across health systems. We are a growing team of practicing MDs, AI scientists, PhDs, creatives, technologists, and engineers working together to empower people and make care make more sense. We have offices located in the Mission District in San Francisco, the SoHo neighborhood of New York, and East Liberty in Pittsburgh." We'll put that in
. Now Responsibilities: Let's list each bullet. From "What You’ll Do": Secure Development & Architecture Leadership - Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals. - Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails. - Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing mentorship on security features, product defense, secure coding practices, application architecture, and vulnerability remediation strategies. - Conduct Training & Awareness: Develop training materials for engineers to build a foundation of security best practices across the engineering organization. Vulnerability Management & Incident Response - Code and Security Reviews: Perform and lead in-depth secure code reviews (both manual and tool-assisted) to identify complex security vulnerabilities and flaws, including logic and authorization vulnerabilities that automated tools often miss. Get hands on with assessing AI models, agents, and architectures. - Internal Penetration Testing: Lead internal penetration testing engagements for net new products and historical systems identify security risks across our environment. - Vulnerability Program Oversight: Design and enhance the end-to-end vulnerability management program for Abridge’s products and applications, ensuring timely identification, prioritization, and remediation of critical security issues while doing so in as developer-friendly a way as possible. - Security Incident Response: Serve as an expert on Abridge’s products and applications for the security incident response team, assisting in investigating and resolving security events and incidents. We'll turn each bullet into
- . Keep the bold headings as part of the text. Now What You’ll Bring: Experience: 7+ years of direct experience in an Application Security role, with a demonstrated history of designing and implementing security improvements at scale. Programming Fluency: Deep proficiency in one or more major programming languages (Python and NextJS a big plus) and a solid background in software development principles. Cloud & Containers: Extensive experience securing applications deployed in Cloud environments (GCP a big plus) and knowledge of containerization technologies (Kubernetes). Technical Depth: Expert-level knowledge of web application security techniques and principles, APIs, IAM (including identity, authentication/authorization, RBAC, ABAC), applied cryptography, etc. AI Security: Deep understanding of the security of AI and ML models, agents, and associated systems. Bonus Points If… - Security Research: Proven experience contributing to or leveraging open-source security tools, publishing security research, managing bug bounty programs, and active engagement in the security industry. - Cross-Functional Influence: Demonstrated ability to drive large, cross-functional technical projects that impact security posture across the entire organization. - Data-Driven Security: Experience defining and utilizing security metrics to measure and report on the effectiveness of the AppSec program to both technical and executive audiences. We'll list each as
- . Benefits: From "Why Work at Abridge?" includes mission description and culture, then "How we take care of Abridgers:" list. Paragraph: "At Abridge, we’re transforming healthcare delivery experiences with generative AI, enabling clinicians and patients to connect in deeper, more meaningful ways. Our mission is clear: to power deeper understanding in healthcare. We’re driving real, lasting change, with millions of medical conversations processed each month. Joining Abridge means stepping into a fast-paced, high-growth startup where your contributions truly make a difference. Our culture requires extreme ownership—every employee has the ability to (and is expected to) make an impact on our customers and our business. Beyond individual impact, you will have the opportunity to work alongside a team of curious, high-achieving people in a supportive environment where success is shared, growth is constant, and feedback fuels progress. At Abridge, it’s not just what we do—it’s how we do it. Every decision is rooted in empathy, always prioritizing the needs of clinicians and patients. We’re committed to supporting your growth, both professionally and personally. Whether it's flexible work hours, an inclusive culture, or ongoing learning opportunities, we are here to help you thrive and do the best work of your life. If you are ready to make a meaningful impact alongside passionate people who care deeply about what they do, Abridge is the place for you." Then benefits list: "How we take care of Abridgers: - Generous Time Off: 14 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees - Comprehensive Health Plans: Medical, Dental, and Vision coverage for all full-time employees and their families. - Generous HSA Contribution: If you choose a High Deductible Health Plan, Abridge makes monthly contributions to your HSA. - Paid Parental Leave: Generous paid parental leave for all full-time employees. - Family Forming Benefits: Resources and financial support to help you build your family. - 401(k) Matching: Contribution matching to help invest in your future. - Personal Device Allowance: Tax free funds for personal device usage. - Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits. - Lifestyle Wallet: Monthly contributions for fitness, professional development, coworking, and more. - Mental Health Support: Dedicated access to therapy and coaching to help you reach your goals. - Sabbatical Leave: Paid Sabbatical Leave after 5 years of employment. - Compensation and Equity: Competitive compensation and equity grants for full time employees. ... and much more!" We'll include these as
- under Benefits heading.
Pay: compensation range: "$214.2K - $252K". Also mention "Competitive compensation and equity grants". We'll include both maybe as
. We should not include Schedule. Now ensure we removed boilerplate: EEO, fraud warning, etc. Now produce HTML fragment. Let's craft:
About Abridge
...
Responsibilities
- Lead Threat Modeling and Design Reviews: Impact the product from ideation through to code that is shipping to production. Conduct advanced threat modeling and security architecture reviews for complex systems, new products, and platform initiatives, providing expert guidance and requirements to meet Abridge’s security goals.
- Define Security Strategy: Define and implement the technical roadmap for the Application Security program, focusing on scalable assurance, proactive security measures, and setting clear standards and guardrails.
- Mentor and Enable: Act as a subject matter expert and trusted advisor to product and engineering teams, providing